[Opendnssec-develop] Finally... KSK rollover

Jakob Schlyter jakob at kirei.se
Tue Mar 16 13:07:06 UTC 2010

are there any differences other that with emergency key rollover, the key is marked as compromised?

1. make sure new KSK is published (in case of standby key, this step is skipped)
2. sign with new KSK
3. wait for ds-seen
4. complete rollover


More information about the Opendnssec-develop mailing list